An administrator needs to configure secure remote access to virtual machines in an Azure virtual network named VNet1 using Azure Bastion. What is the correct sequence of steps to configure and connect using Azure Bastion?
- 1Add a subnet named AzureBastionSubnet with an address prefix of /26 or larger to VNet1.
- 2Create a static public IP address configured with the Standard SKU.
- 3Deploy the Azure Bastion host resource and associate it with the subnet and public IP.
- 4Connect to a virtual machine in VNet1 using the Bastion option in the Azure portal.
Answer
To configure and use Azure Bastion, you must first create the AzureBastionSubnet (/26 or larger), provision a Standard SKU public IP with static allocation, deploy the Azure Bastion host, and then connect to the virtual machine using the Bastion option.
The correct sequence begins with the infrastructure prerequisites: creating the 'AzureBastionSubnet' with a /26 or larger prefix, creating a Standard SKU public IP address, deploying the Bastion host linked to these resources, and finally establishing a secure connection to a virtual machine in the network.
Step-by-Step Solution
Key Concept
Azure Bastion requires a dedicated subnet named AzureBastionSubnet with at least a /26 prefix and a Standard SKU public IP address before the host can be deployed.
Estimated Time:45s